The National Privacy Commission (NPC) has clarified its role regarding the ongoing iris scanning verification process in Plaridel, Bulacan. Additionally, Data Privacy Lawyer Attorney Enrique “Buko” Dela Cruz addressed privacy concerns about Worldcoin’s activity on his Facebook page.
Key takeaways
- The NPC said in an email to BitPins that it does not approve, or clear activities related to personal data processing but provides Certificates and Seals of Registration.
- Meanwhile, Atty. Dela Cruz asserts that the iris scanning activity is voluntary and does not store personal identity data.
- Still, concerns persist regarding the legitimacy of the process and compliance with the Data Privacy Act of 2012.
NPC’s stance on Worldcoin’s iris scanning activity
“To clarify, the NPC does not provide approval or clearance for any activities related to the processing of personal data. Instead, we issue Certificates of Registration and Seals of Registration to organizations that have successfully registered with us, in accordance with the Data Privacy Act.”
Roren Marie Chin, PhD, Chief of Public Information and Assistance Division, NPC
The NPC, as an independent body under the Data Privacy Act of 2012 (RA 10173), ensures compliance with international data protection standards. Its goal is to establish a regulatory framework that holds organizations accountable for processing personal data while maintaining global privacy norms.
The NPC urges individuals with concerns about data privacy violations to reach out for assessment and potential action.
Atty. Enrique Dela Cruz on Worldcoin’s iris scanning activity
Atty. Enrique Dela Cruz shared key legal perspectives on the ongoing iris scanning verification process of Worldcoin in Plaridel, Bulacan:
- Not a violation of data privacy: Dela Cruz said participation is voluntary, requiring user consent before scanning. No names, addresses, or other personal data are collected.
- Worldcoin does not sell collected data: “The World Network does not collect or store personal information or identity of the user. Because it has no central database of a user’s personal information, there is no data that can be sold,” Dela Cruz shared in his Facebook page, posted here translated from Filipino.
- Worldcoin’s mobile app is registered with the NPC: As per Dela Cruz, “Tools for Humanity (TFH), the developer of the World app and responsible for processing data, is registered with the NPC, ensuring compliance with the Data Privacy Act of 2012.”
Concerns over Data Privacy Act compliance continues
A legal question was raised by Niwre Fortin Garcia Talastas about whether iris scanning violates the Data Privacy Act of 2012:
- Is participation truly voluntary if there is monetary compensation? If an incentive is provided, it raises concerns about whether consent is freely given or influenced by financial gain, said Talastas
- Consent must be informed, not just given: Talastas also shared: “Under the Data Privacy Act, mere agreement is not enough; users must fully understand what data is being collected, why, how it will be processed, and the associated risks.”
- Finally, the commenter also shared that the justification for iris scanning is to detect deepfakes and AI bots. However, he emphasized, that alternative verification methods, such as motion detection and voice recognition, could be sufficient.
This article is published on BitPinas: NPC Clarifies Data Protection Rules as Worldcoin Expands in the Philippines
What else is happening in Crypto Philippines and beyond?
